Bruce writes:
> Sorry -- this attack doesn't work on the HP3000, because of the stack
> layout.

Actually, it could work ... if the data isn't copied into a local
array first.  (Or, probed to see if all 8 possible bytes are accessible.)

Yes, we use a stack ... but we use other 32-bit addressable data areas, too.
(e.g., short mapped files, heap, global variables)

--
Stan Sieler                                          [log in to unmask]
                                     http://www.allegro.com/sieler.html